Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: Kvqybo4p/9dYQ+2yWsNpMKa3/khaKLl+zqKym6j9fEY=
Subject key identifier: E6:AC:DB:B6:1B:B1:83:A0:00:C4:08:F3:07:93:4E:67:07:73:67:54
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019A5119E9EB137F127BC077F627FABDB29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0E89
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: pmOxslArwFmvz/Brc+0dWxciak0t2+W0Z7modOr5F+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e9:eb:13:7f:12:7b:c0:77:f6:27:fa:bd:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=e6acdbb61bb183a000c408f307934e6707736754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:18:e3:b5:2e:04:12:84:c4:2b:84:ff:ac:
9f:d1:ba:8e:aa:d1:ac:b7:53:2d:c6:cf:3e:64:25:
92:72:20:56:7e:a7:13:61:92:1b:73:07:32:53:2f:
00:6e:70:48:0d:9c:b8:59:55:ca:04:c7:7f:8f:92:
77:ba:c8:bb:e0:d0:9a:99:44:c4:9b:14:cf:82:69:
f1:a1:9f:f0:5d:3d:7f:b1:c5:c3:13:38:74:eb:ff:
d1:d0:e2:1b:06:a2:27:97:57:91:7e:7b:7d:5f:74:
c4:f2:43:e9:06:12:aa:b4:22:08:97:45:5d:7f:8b:
fa:c4:bb:c3:52:ef:93:8c:1d:1c:3f:c1:91:47:c8:
8f:9a:f8:59:d0:03:93:59:73:53:33:a0:f4:28:3d:
62:8c:fe:98:f7:06:67:7b:9f:da:f0:bc:ec:50:aa:
74:91:4f:34:f4:82:b8:99:0d:38:08:3d:2d:b4:cd:
e9:06:31:de:b9:91:1e:c5:3c:ef:ff:07:45:06:65:
1d:4a:76:8c:ea:0c:4a:83:14:6a:b7:52:c0:27:f4:
8a:86:63:d4:c6:a3:46:b5:ee:69:8c:1d:b4:54:af:
71:d6:86:36:44:16:2a:44:86:e2:d1:9d:df:54:63:
83:a2:64:1e:b0:aa:13:85:ea:3b:ef:a3:b1:d0:fb:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:DB:B6:1B:B1:83:A0:00:C4:08:F3:07:93:4E:67:07:73:67:54
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:4d:eb:58:d1:17:b3:7e:54:c0:b5:4c:a9:12:04:ed:25:a2:
18:ca:a6:d5:13:b6:71:00:28:35:91:26:21:37:21:cd:49:5f:
02:f7:c2:57:3a:26:fc:4a:ff:99:8c:20:40:69:b4:95:aa:c8:
82:58:db:d6:6e:4d:ae:b9:b1:1c:c2:7c:93:c2:83:e0:3b:cf:
e5:5c:b7:6c:d3:5d:6e:bc:a5:1e:44:6c:31:99:51:6a:f8:d3:
e2:67:61:e1:d6:d2:0a:b2:83:e5:4c:a3:02:2c:f5:02:bd:19:
4a:8b:6d:b4:c7:98:b8:ab:93:d5:21:3a:cb:00:f3:c9:df:ea:
9b:7a:08:8e:4b:57:9a:48:33:ee:2d:ba:1d:bf:f0:cb:0a:c3:
16:66:6a:bd:eb:9a:44:d9:e3:f6:36:1e:c6:7d:6b:98:8e:a2:
58:43:d1:98:c1:84:04:5f:22:0c:47:d0:f0:51:d2:6f:36:95:
64:aa:95:46:2b:fe:64:61:8a:9c:11:1c:ce:2b:43:e7:4d:c6:
e5:0d:1a:aa:79:fd:51:dd:a0:28:6b:8d:62:5c:da:5f:61:02:
07:20:b8:68:22:ce:ae:85:59:9e:cc:8e:7b:4b:63:0f:98:c5:
b9:79:f0:a9:56:aa:69:53:2e:75:d6:24:93:67:b8:1f:b8:3f:
a8:65:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:32 2025 by rpki-client